Vulnerabilities > CVE-2021-31477 - Unspecified vulnerability in GE Reason Rpv311 Firmware 14A03

047910
CVSS 7.3 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
LOW
network
low complexity
ge
NVD
Published: 2021-06-16
Updated: 2024-11-21

Summary

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware and filesystem of the device. The firmware and filesystem contain hard-coded default credentials. An attacker can leverage this vulnerability to execute code in the context of the download user. Was ZDI-CAN-11852.

Vulnerable Configurations

Part Description Count
OS
Ge
1
Hardware
Ge
1

References